Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          wdRQkS5pR2N+L0bJFTGGioNxx/8GBeHqbty0a+Jbg9U=
Subject key identifier:   2E:62:8C:5D:4B:EB:A7:6B:F6:B1:D7:06:4B:F0:35:C5:0C:C1:BD:A2
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019EC0DB7822E72314B4BC26C8E3E55BBE0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 12:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:08 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: ktLXlTARcnAb+17xk8vji8EGvbP8VhDzxXreKrw/gi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:78:22:e7:23:14:b4:bc:26:c8:e3:e5:5b:be:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Jun 13 12:01:08 2026 GMT
            Not After : Jun 14 12:01:08 2026 GMT
        Subject: CN=2e628c5d4beba76bf6b1d7064bf035c50cc1bda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:f2:e7:73:bb:ab:1d:c2:35:2b:9b:1d:5f:
                    e9:47:14:0f:91:e5:78:10:1c:eb:0d:a2:3b:2c:81:
                    54:89:83:90:4a:e6:94:00:a1:36:e2:f5:84:6c:fa:
                    1a:bf:0b:fb:28:2f:cd:e8:71:5b:d6:19:66:49:48:
                    9f:c6:de:b5:be:30:66:b8:df:a8:53:da:a8:0b:47:
                    28:8e:70:03:69:21:c5:cd:08:ff:51:c0:be:60:c8:
                    5b:fd:ef:bc:25:bb:5b:1a:19:97:88:36:1e:26:c1:
                    25:5a:17:80:f3:94:31:29:d6:1d:e3:6e:27:1b:cc:
                    af:d4:f6:9e:bd:a0:ff:3e:c8:01:71:b0:ce:86:f4:
                    7a:5e:13:81:c5:2d:c8:a8:42:c6:36:4b:28:f0:70:
                    62:c0:00:3f:f5:05:36:11:e8:57:d6:79:8b:72:03:
                    b1:41:78:cf:df:86:c1:07:ed:76:38:41:aa:da:cf:
                    b9:6b:88:a7:06:85:cc:e0:66:82:6f:f5:d2:72:7f:
                    fc:7b:a7:04:68:88:f0:c4:b2:39:30:04:5a:74:f8:
                    ff:9e:40:9d:fe:70:47:a9:f7:9b:3a:2b:6f:79:38:
                    b5:d2:f0:ba:7a:1e:79:3f:63:80:3e:78:72:03:11:
                    f9:d2:ab:ec:dc:fa:54:25:ab:a1:f0:c9:3e:e4:bd:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:62:8C:5D:4B:EB:A7:6B:F6:B1:D7:06:4B:F0:35:C5:0C:C1:BD:A2
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:df:12:a8:5a:ca:c7:70:b8:b7:d8:ef:f9:e2:27:e4:2f:
         57:a9:97:db:91:de:e0:ae:2f:78:68:2f:1b:f6:ab:08:87:55:
         8e:af:34:04:3f:b4:7c:e2:c2:d9:e4:bd:0a:b5:e1:cc:58:d7:
         01:42:3d:b5:c7:f7:a8:a3:07:13:27:dc:e3:2e:0c:19:47:af:
         c7:24:6e:6e:60:9d:2c:3d:f6:ac:0e:46:69:c7:ed:72:64:3c:
         5d:47:fd:15:95:70:c1:ee:78:a1:04:0f:79:cf:bc:c9:32:59:
         d6:a6:65:e5:1d:2e:29:f0:d1:5c:0f:84:8d:3e:0d:a1:7b:a1:
         92:ff:ae:88:83:c2:60:b4:5f:a5:90:d9:22:b9:c9:18:cc:42:
         05:29:ff:55:36:8c:ab:ed:cd:01:42:f4:24:57:68:52:ba:01:
         27:4c:33:f2:a8:c9:75:4b:d2:78:74:ae:8f:d5:7c:cb:d4:24:
         0a:d2:5d:07:5b:d0:3b:d8:d3:d0:c1:27:e8:0a:45:85:27:d8:
         eb:d0:0c:b8:f9:df:9f:a1:ac:7c:22:9c:74:8f:a2:1c:68:a8:
         ae:70:13:9f:f6:2b:fb:c8:87:7b:24:ca:fd:19:75:d6:52:b8:
         67:a8:61:ff:63:69:9d:aa:52:90:7e:eb:40:1c:30:c4:49:b6:
         61:45:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:27 2026 by rpki-client